URL hxxp://54.213.74.177/?check=2 also getting ton of pop ups saying avast saved

Viruses and worms
1

from reading here I see you need the FRST logs generated please see attached

2

currently running malwarebytes it will be a while.

3

Could you let me know if this stops the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

SearchScopes: HKCU - DefaultScope {13FE8A3B-7D7A-48A7-BD16-63C0D2A812F9} URL = SearchScopes: HKCU - {13FE8A3B-7D7A-48A7-BD16-63C0D2A812F9} URL = 2014-07-08 00:20 - 2014-07-08 00:20 - 00093946 _____ () C:\Users\Bryan\Downloads\5B0E.tmp 2014-07-06 18:49 - 2014-07-06 18:49 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin 2014-07-02 17:23 - 2014-07-02 17:23 - 00672072 _____ () C:\Users\Bryan\Downloads\E337.tmp C:\ProgramData\MakeMarkerFile.exe C:\ProgramData\StartMenuReviver.exe C:\Users\EasySurvey\EasySurvey.exe CMD: bitsadmin /reset /allusers CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

4

so I got nothing from malwarebytes scan

ran the FRST with the fixlist.txt file and I attach the fixlog file

Definitely will stay in touch here. I have to leave but even now the alerts were already stopped but I suspect the sites I visited was responsible and my theory is there are ads on sports websites that may be responsible. for instance the 2 sites that seamed to trigger them were realgm.com and dallasbasketball.com and I will test this further to determine this. Yes someone must be targeting us sports nuts. LOL

5

No problem on the time… Remember to run AdwCleaner though :slight_smile:

6

evidently there were some PUP’s on board I did not know my computer was even pregnant. LOL thanks for the assist hopefully this does it I’ll be bach if I need more assistance and still see the annoying warnings.

7

If all is well tomorrow let me know and I will tidy up :slight_smile:

8

still getting the alert

attaching FRST files again to see if a difference exists

9

plus I might add it is only when I visit the sites I mentioned like Realgm.com and dallasbasketball.com

10

ran the adw again but it is still giving me the alert

http://www.avast.com/en-us/lp-fr-virus-alert?p_ext=&utm_campaign=Virus_alert&utm_source=prg_fav_90_0&utm_medium=prg_systray&utm_content=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_vir=VVJMOk1hbA&p_prc=C:\Program%20Files%20(x86)\Google\Chrome\Application\chrome.exe&p_obj=aHR0cDovLzU0LjIxMy43NC4xNzcvP2NoZWNrPTI&p_var=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_elm=7&p_lex=322&p_lid=en-us&p_lng=en&p_lqa=0&p_lqe=0&p_lst=0&p_lsu=24&p_pro=0&p_bld=empty&p_vep=9&p_ves=0&p_sts=0&p_vbd=2021&p_hid=698c66c4-6f70-454c-8d1e-0b1bc43d5d37&p_ram=8083&p_cpu=8.0

11

I think there are some poisoned video ads on the web at the moment as you are the second or third to come out with this specific indicator.

Could you check those sites with IE and see if the alert appears